Otto Support – An MCP, Agentic-AI Security Challenge
Researchotto-support CTF Read at Bishop Fox
Below is the opening; the full story is at Bishop Fox.
From Bishop Fox
TL;DR
Bishop Fox built a vulnerable MCP-based customer support system where your AI assistant interacts with tools, services, and local resources, then challenges you to escalate access, exfiltrate data, and execute code.
This hands-on CTF simulates real-world AI agent attack surfaces, requiring a mix of tool abuse, prompt manipulation, and source code analysis to uncover how modern MCP architectures fail in practice.…
Worried this affects your company?
Discuss a security assessment of your internet-facing systems. Scope agreed before testing.